JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.89.2.246

103.89.2.246 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 32%: ?

32%

ISP	PT Biznet Gio Nusantara
Usage Type	Data Center/Web Hosting/Transit
ASN	AS133800
Hostname(s)	ip-246-2-89-103.wjv-1.biznetg.io
Domain Name	biznetgio.com
Country	🇮🇩 Indonesia
City	Bogor, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.89.2.246

Whois 103.89.2.246

IP Abuse Reports for 103.89.2.246:

This IP address has been reported a total of 12 times from 5 distinct sources. 103.89.2.246 was first reported on August 31st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 bps-statistics	2026-09-02 06:18:00 (5 hours ago)	XML RPC Scan Activities: "2026-09-02T13:18:00.609+07:00" "/xmlrpc.php" "103.89.2.246" "Mozilla/5.0 ( ... show more XML RPC Scan Activities: "2026-09-02T13:18:00.609+07:00" "/xmlrpc.php" "103.89.2.246" "Mozilla/5.0 (Linux; Android 7.1; Xiaomi Mi 10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Mobile Safari/537.36" show less	Web App Attack Brute-Force
🇮🇩 sockominfo	2026-09-02 06:00:53 (5 hours ago)	Active Response: IP 103.89.2.246 Blocked via Firewall Drop. Threat Score: 3.7/10 (LOW). Confidence: ... show more Active Response: IP 103.89.2.246 Blocked via Firewall Drop. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-02 05:01:03 (6 hours ago)	Active Response: IP 103.89.2.246 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: ... show more Active Response: IP 103.89.2.246 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-02 04:00:09 (7 hours ago)	Active Response: IP 103.89.2.246 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Repo ... show more Active Response: IP 103.89.2.246 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 soc-yk	2026-09-02 01:42:17 (9 hours ago)	Type: credential_attack Risk: 66 Events: 2586 Evidence: - Repeated authentication attack activity d ... show more Type: credential_attack Risk: 66 Events: 2586 Evidence: - Repeated authentication attack activity detected - Credential abuse behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Brute-Force SSH
🇮🇩 cybersecbengkalis	2026-09-02 01:02:00 (10 hours ago)	paya bot scanner, cms wp/joomla login attemp ilegal 02/09/2026	Web Spam SQL Injection Hacking
🇮🇩 soc-yk	2026-09-01 18:54:36 (16 hours ago)	Type: suspicious_network_activity Risk: 86 Events: 2634 Evidence: - Persistent suspicious network a ... show more Type: suspicious_network_activity Risk: 86 Events: 2634 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇮🇩 soc-yk	2026-09-01 02:06:17 (1 day ago)	Type: suspicious_network_activity Risk: 63 Events: 729 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 63 Events: 729 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇮🇩 bps-statistics	2026-09-01 00:11:15 (1 day ago)	XML RPC Scan Activities: "2026-09-01T07:11:15.422+07:00" "/xmlrpc.php" "103.89.2.246" "Mozilla/5.0 ( ... show more XML RPC Scan Activities: "2026-09-01T07:11:15.422+07:00" "/xmlrpc.php" "103.89.2.246" "Mozilla/5.0 (Linux; Android 4.1; Samsung Galaxy Note 10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36" show less	Web App Attack Brute-Force
🇮🇩 soc-yk	2026-08-31 18:06:17 (1 day ago)	Type: suspicious_network_activity Risk: 88 Events: 374 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 88 Events: 374 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇮🇩 bps-statistics	2026-08-31 17:16:41 (1 day ago)	XML RPC Scan Activities: "2026-09-01T00:16:41.248+07:00" "/xmlrpc.php" "103.89.2.246" "Mozilla/5.0 ( ... show more XML RPC Scan Activities: "2026-09-01T00:16:41.248+07:00" "/xmlrpc.php" "103.89.2.246" "Mozilla/5.0 (Linux; Android 7.0; Huawei P30) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36" show less	Web App Attack Brute-Force
🇮🇩 Burayot	2026-08-31 13:38:52 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.89.2.246 (ID/Indonesia/ip-246-2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.89.2.246 (ID/Indonesia/ip-246-2-89-103.wjv-1.biznetg.io): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 203.219.39.130

🇺🇸 104.28.233.73

🇨🇳 60.166.83.91

🇬🇧 45.133.173.229

🇻🇳 27.118.20.168

🇺🇸 20.168.124.252

🇸🇬 2a03:2880:f80d:27::

🇰🇷 222.231.24.24

🇹🇼 198.235.24.69

🇨🇦 146.70.198.208

🇺🇸 136.144.35.98

🇰🇪 102.215.15.121

🇮🇹 82.54.63.87

🇻🇪 66.9.161.117

🇷🇺 31.41.14.254

🇬🇧 31.14.254.110

🇸🇪 171.25.158.24

🇰🇿 95.58.28.178

🇷🇴 92.118.39.50

🇬🇧 81.19.219.232